a95d54401de2271df517538dba2113ed3a94d7f92ebb8e29baa9634ee4250dbc | Triage

Analysis

max time kernel
148s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
26-12-2023 08:13

Sharing

Report Analysis Logs

General

Target

5ed185c32b737d811e5590cafdc51eed.dll
Size

6KB
MD5

5ed185c32b737d811e5590cafdc51eed
SHA1

9713f86f77cdb6b36183e7c2031e4dfb5de7a11f
SHA256

a95d54401de2271df517538dba2113ed3a94d7f92ebb8e29baa9634ee4250dbc
SHA512

88d79cb29353d1f92a5c754ef6c3854b2b08d5f1e5f64be57efbfb0cacb36b72f242057a98a39394f985fd4c98459bd0b34aed46e6573d712c704a548e5a42df
SSDEEP

48:63mll5YVOa9VUX1iwbQWu0SB+BDq9J5SH:VDa9VUX9bQWyB+FqX5SH

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 5012 wrote to memory of 2180	5012	rundll32.exe	18
PID 5012 wrote to memory of 2180	5012	rundll32.exe	18
PID 5012 wrote to memory of 2180	5012	rundll32.exe	18

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\5ed185c32b737d811e5590cafdc51eed.dll,#1
1⤵
PID:2180

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\5ed185c32b737d811e5590cafdc51eed.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:5012

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads